fix execution policy